Privacy Policy – Nexus Consulting
Last updated version : 1 November 2026
Protecting your personal data matters to us, and we take our legal obligations in this area seriously. This policy explains, clearly and openly, what personal data Nexus Consulting collects, how we use it and for what purpose.
Contents
- Controller and contact
- Personal data we collect
- How we collect your data
- Why we collect personal data
- Legal bases
- Sharing personal data with third parties
- Transfers outside Switzerland and the EEA
- Storage and retention periods
- Profiling and automated decision-making
- Data security
- Children’s data
- Cookies and other tracking technologies
- Social media plugins
- Marketing emails and newsletter
- Your rights
- How to exercise your rights
- Links to third-party websites
- Changes to this policy
1. Controller and contact
The controller is Nexus Consulting, Rue de Varembé, 3, 1202 Geneva. Switzerland.
For any data protection question, or to exercise your rights, email us at contact@consulting-nexus.com or write to us at the address above.
2. Personal data we collect
The data we generally collect falls into these categories:
|
Category |
Examples |
|---|---|
|
Identity |
First and last name |
|
Contact |
Address, phone, email |
|
Professional background |
Employer, team and department; application details if you apply to work with us |
|
Billing and payment |
Billing contact and address, payment and bank details |
|
Content you share |
Messages, feedback, answers to the Team check-up and other questionnaires, material produced in workshops, retreats and coaching |
|
Device and browser |
IP address, device and browser identifiers, cookie identifiers |
|
Usage and browsing |
Pages visited, time on site, analytics and diagnostic data |
|
Location |
Country and region, derived from your IP address |
|
Photos, video and audio |
Pictures or recordings from workshops and events, with your consent |
3. How we collect your data
We collect personal data in the following ways:
- Directly from you – when you contact us, book a call, fill in a form, download a free resource, sign up for our newsletter, become a client, or apply to work with us.
- Through what you share – when you or others send, upload or enter information during our services, for example questionnaire answers or session notes.
- Through your interactions with us – when you take part in our workshops, retreats, coaching or events, open our emails or see our posts. Some of this is collected automatically through cookies and similar technologies.
- From other sources – when your employer engages us and shares participants’ details, or from publicly available sources such as LinkedIn, company websites and public registers.
4. Why we collect personal data
We only use your personal data for the purpose it was collected for, namely:
- to meet our contractual obligations;
- to set you up as a new client;
- to prepare and deliver our team building days, Team check-up, retreats and coaching, and to invoice them;
- for any other purpose you have consented to, or on your instructions;
- to communicate with you about our services;
- to run surveys and gather feedback on our sessions;
- to develop and improve our services, website, marketing and client relationships;
- to suggest services that may interest you;
- to measure how our website and services are used;
- to protect your security and ours, and prevent misuse or fraud;
- to meet our legal obligations;
- to establish, exercise or defend our rights and legitimate interests;
- to organise and improve our internal processes.
5. Legal bases
Depending on the purpose, we process your data on the following bases:
- performance of a contract, or steps taken before entering into one;
- your consent and instructions;
- our legitimate interests (for example managing client contacts, marketing our services, running our website);
- applicable Swiss or foreign legal requirements.
We apply the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
6. Sharing personal data with third parties
To enter into or carry out a contract and deliver our services, we may need to share your data with partners we work with. We first make sure they meet legal data protection requirements.
The companies concerned are listed below:
|
Provider |
Use |
Location |
|---|---|---|
|
|
Professional network, company page, ads |
Sunnyvale, USA / Dublin, Ireland |
|
Google (Analytics, Workspace, Forms) |
Website analytics, email, questionnaires |
Mountain View, USA |
|
Infomaniak |
Website hosting, email |
Geneva, Switzerland |
|
Mailchimp |
Newsletter, free resources |
Atlanta, USA |
|
Freshsales |
CRM |
India |
|
Zoom/Teams (Microsoft) |
Online sessions |
USA |
|
Anthropic (Claude) |
AI assistant for drafting, analysing anonymised questionnaire results and preparing sessions |
Dublin, Ireland / |
Where an assignment requires it, we may also share limited information (such as a participant list) with partner facilitators or event venues.
We may disclose data to third parties if required to do so by law or by an enforceable administrative or court decision.
AI tools. We use AI assistants to help us draft content, prepare sessions and analyse questionnaire results. Before entering any information, we remove names and other details that identify individuals. We use settings that prevent providers from using our data to train their models, and we never use AI to make decisions about individuals.
7. Transfers outside Switzerland and the EEA
We process and store your personal data mainly in Switzerland.
Where data is processed outside Switzerland or the EEA, we only transfer it if:
- the recipient provides an adequate level of data protection;
- you have given your explicit consent; or
- we are legally required to do so.
To assess whether the level of protection is adequate, we rely in particular on:
- an adequacy decision by the Swiss Federal Council for the country concerned;
- the recipient’s certification under the Swiss-U.S. Data Privacy Framework; or
- standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).
8. Storage and retention periods
We keep your personal data for as long as we need it to meet our contractual and legal obligations and the purposes of the processing. In practice, this means for the whole business relationship, from preparing an assignment to its end, and afterwards for as long as legal record-keeping rules require (10 years for accounting records in Switzerland).
Individual answers to the Team check-up and coaching notes are deleted 12 months after the assignment ends; only anonymised team results are kept.
We may also keep data for as long as claims could be brought against us, where the law requires it, or where we have a legitimate business interest such as evidence or documentation.
9. Profiling and automated decision-making
We do not carry out profiling with your personal data, and we do not make decisions about you based solely on automated processing. Team check-up results are always interpreted by a person, together with the team.
10. Data security
We use technical and organisational measures to protect your personal data against loss, theft, unauthorised access, disclosure, alteration and destruction. We also make sure our subcontractors follow data protection rules.
Individual questionnaire answers and coaching content are never shared with your employer or manager; clients only receive anonymised, team-level results.
No internet transmission is ever completely secure, so despite our efforts we cannot guarantee the security of information you send us through our website. If you prefer, you can share information with us in person or by phone.
11. Children’s data
Our website and services are not aimed at children. If we learn that personal data of a child under 18 has been collected inappropriately, we will take all reasonable steps to delete it.
12. Cookies and other tracking technologies
What is a cookie? A cookie is a small text file stored on your device when you visit a website. It lets the site recognise your browser, making it easier to use and helping us produce visitor statistics.
Legal bases and purposes. We use cookies on the basis of your consent and of our legitimate interest, in particular to provide a service you have asked for. Our cookies fall into four groups:
- Strictly necessary – needed for the site to work, such as moving between pages. The site cannot function properly without them. Only strictly necessary cookies run without consent on our website.
- Preferences – remember your choices, such as language or region, to tailor your experience.
- Performance – collect anonymous information on how visitors use the site, so we can improve it.
- Marketing – track visits across websites to show relevant advertising. These are usually set by third parties such as advertising or social networks.
Who sets these cookies? Cookies on our site are set by Nexus Consulting and/or our partners. Partners’ own privacy policies govern the cookies they set.
Google Analytics. We use Google Analytics to understand how our site is used: number of visitors, pages viewed and time spent. The information collected by its cookies is sent to and stored on Google’s servers, and used to produce activity reports for us. IP addresses are anonymised before being sent to Google, and the data is not used to identify you. More information: Google Analytics privacy.
Google Maps. We use Google Maps to display maps on our site, which involves sending data such as your IP address and location to Google. More information: Google Maps privacy.
Google reCAPTCHA. We use Google reCAPTCHA to protect our forms against spam and automated attacks. It uses cookies and analyses interactions such as mouse movements and clicks to tell humans from bots. More information: Google privacy policy.
List of cookies. The full list of cookies used on our site is available on our cookie policy page.
Managing cookies. You can change your cookie preferences or withdraw consent at any time via the “Cookie policy” link in the website footer. You can also block or delete cookies in your browser settings; allaboutcookies.org explains how
13. Social media plugins
Our website may include buttons or plugins that let you share content on social networks, mainly LinkedIn (also Instagram). They are recognisable by each network’s logo.
When you use them, the network may collect data about you, such as your IP address, the pages you visited on our site and how you interacted with the plugin. If you are logged in to your account at the time, this data may be linked to your profile and used for advertising or profiling under the network’s own privacy policy.
We have no control over how social networks process your data, so we recommend reading their privacy policies. To prevent this collection, log out of your social media account before visiting our site or do not use these plugins.
14. Marketing emails and newsletter
You can sign up for our newsletter, or download a free resource such as our “From a Group to a Team” guide, by giving us your email address. You will then receive practical tips on team cohesion, news about our services, event invitations and occasional surveys.
To protect your data, we use a two-step confirmation (double opt-in): after signing up, you receive an email with a link you must click to confirm your subscription.
You can unsubscribe at any time via the unsubscribe link at the bottom of every email, or by writing to contact@consulting-nexus.com. It may take a few days for this to take effect.
We will not share your email address with third parties for their own marketing.
15. Your rights
You have the right to:
- access your personal data, and have it corrected or deleted;
- restrict or object to the processing of your personal data;
- withdraw your consent at any time, with effect for the future, where processing is based on consent;
- receive a copy of your personal data (data portability).
16. How to exercise your rights
If you have any concern about how we collect, use or protect your personal data, please contact us at contact@consulting-nexus.com so we can try to resolve it. We may ask you to confirm your identity, and we aim to reply within 30 days.
If you are not satisfied with our answer, or believe we are processing your data inappropriately or unlawfully, you may contact the competent supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, the authority of your country of residence.
17. Links to third-party websites
Our website contains links to other companies’ websites. We are not responsible for the data protection practices of these external sites, so we recommend reading their own privacy policies.
18. Changes to this policy
Nexus Consulting may update this privacy policy at any time, in particular to comply with legal requirements or reflect changes in our services.
The current version is always available on our website.
Please check it regularly to stay informed of any changes.
Last updated 1 November 2026